Kerberos explained
How Kerberos signs you in once and opens many services without sending your password around: the KDC, tickets, the TGT and service tickets, the three-step exchange, why clocks matter, SPNs and keytabs, and the attacks to know about.
CodexBash, , 5 min read
Kerberos is the protocol behind signing in to a Windows domain, and behind much single sign-on in company networks, Hadoop clusters and Linux servers. Its central idea is old and still elegant: prove who you are once, receive a ticket, and show tickets instead of your password to every service you use afterwards. Your password never travels across the network at all. This article explains how the tickets work.
Sign in to read the rest
The whole 5 minute article is free with an account, along with every problem, lesson and tutorial. No card.